This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/4uQiIz-NMAyBiXKYAOFesJYFaTo.roa File: 4uQiIz-NMAyBiXKYAOFesJYFaTo.roa (raw, json) Hash identifier: sgg7t/axC5+BJccoHRq2eZqdOKI6JJ+dD5n9PgXCumE= Subject key identifier: E2:E4:22:23:3F:8D:30:0C:81:89:72:98:00:E1:5E:B0:96:05:69:3A Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D1C0ADDBDA7C87192AC80D04CB8AF Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/4uQiIz-NMAyBiXKYAOFesJYFaTo.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41313 IP address blocks: 84.1.42.0/23 maxlen: 23 84.1.44.0/22 maxlen: 22 84.1.44.0/24 maxlen: 24 84.1.240.0/21 maxlen: 21 84.1.240.0/24 maxlen: 24 84.1.246.0/24 maxlen: 24 145.236.80.0/24 maxlen: 24 195.228.11.0/24 maxlen: 24 195.228.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1c:0a:dd:bd:a7:c8:71:92:ac:80:d0:4c:b8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2e422233f8d300c8189729800e15eb09605693a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:db:9f:8a:11:1e:80:60:a9:c5:27:f6:4a: 0a:68:51:60:5f:11:8c:d1:61:2b:aa:e6:70:09:bb: 33:c5:fc:91:7c:0a:0e:72:6a:3d:2d:9a:61:c3:07: 2a:40:22:99:a9:99:5a:42:17:3c:1a:8a:9a:d9:cb: f3:63:a3:c0:ca:ec:01:94:f2:20:78:6d:7c:86:60: cc:0b:8c:07:1d:78:8e:84:36:8a:8b:53:64:18:e7: 67:f8:d7:2a:c1:14:0e:d5:c4:6c:3c:1b:e1:49:9c: fc:15:ab:f0:70:00:dd:05:cc:0d:98:04:46:0b:c4: 3a:f4:22:f3:4f:7e:3a:2f:18:af:f8:51:67:28:9e: 16:c0:16:0c:d1:37:1e:e7:0c:63:58:9f:98:78:88: 65:55:19:d9:f9:66:a1:35:32:a8:78:ae:7d:a7:ef: b9:cd:a9:3d:ac:f6:6d:be:3a:04:80:37:6f:59:55: 3d:cf:50:f7:be:9a:9a:53:03:9d:c2:a1:d2:70:03: e7:3f:b3:d4:f4:13:98:cc:6d:37:49:56:3a:b3:d2: c7:30:94:2a:8e:f1:e4:d4:7f:28:fc:ff:1e:7e:b7: f0:e8:04:f6:19:b2:dc:2b:1d:65:55:73:38:62:14: aa:9f:9e:35:bd:59:d0:13:4b:5f:42:27:7c:ca:6d: 3c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E4:22:23:3F:8D:30:0C:81:89:72:98:00:E1:5E:B0:96:05:69:3A X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/4uQiIz-NMAyBiXKYAOFesJYFaTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.1.42.0-84.1.47.255 84.1.240.0/21 145.236.80.0/24 195.228.11.0/24 195.228.43.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:06:2f:2f:f6:a2:14:88:90:d4:74:27:7a:ce:2a:c5:89:69: 58:83:a4:5e:c2:b6:30:b8:7d:36:31:44:8d:1c:0b:40:c6:f8: 10:0d:58:26:c1:16:1e:40:4c:67:c3:a5:64:f3:f4:e8:84:a2: 27:c0:0c:c1:69:c1:84:31:9b:e4:b5:27:04:41:8b:97:d5:6d: 72:4f:97:9b:0d:19:3e:78:23:1f:87:2f:7c:95:3d:e1:47:ef: b1:e8:56:48:61:3a:5f:be:0c:6e:86:b6:e9:62:5c:e7:25:16: 09:d9:50:ae:cc:25:01:32:d7:92:e9:51:6c:57:49:67:a8:d7: f1:80:ff:b6:ab:36:f2:fe:7b:d4:8a:21:4e:33:3c:a6:23:33: 66:ce:0c:85:fb:eb:f2:d0:24:59:04:44:3c:ef:b2:68:93:20: 8f:cc:3b:fd:fb:d9:5e:ce:47:20:1e:27:89:3b:01:ce:db:c5: 54:8b:6f:37:69:d1:4d:7d:1a:f8:b5:73:8e:4e:31:ca:8e:b8: af:39:53:78:49:67:ee:f8:0b:98:ba:23:62:3f:a1:c7:1c:5a: f1:32:96:eb:0b:f0:9a:e9:9f:ae:02:4a:46:51:07:bc:3f:31: 7d:4f:75:c6:0f:17:a5:d0:fc:e7:8e:cf:d5:33:d5:ae:26:06: 44:33:0e:f4 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9XRwK3b2nyHGSrIDQTLivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmU0MjIyMzNmOGQzMDBjODE4OTcyOTgwMGUxNWViMDk2MDU2OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTfbn4oRHoBgqcUn9koKaFFgXxGM 0WErquZwCbszxfyRfAoOcmo9LZphwwcqQCKZqZlaQhc8Goqa2cvzY6PAyuwBlPIg eG18hmDMC4wHHXiOhDaKi1NkGOdn+NcqwRQO1cRsPBvhSZz8FavwcADdBcwNmARG C8Q69CLzT346Lxiv+FFnKJ4WwBYM0Tce5wxjWJ+YeIhlVRnZ+WahNTKoeK59p++5 zak9rPZtvjoEgDdvWVU9z1D3vpqaUwOdwqHScAPnP7PU9BOYzG03SVY6s9LHMJQq jvHk1H8o/P8efrfw6AT2GbLcKx1lVXM4YhSqn541vVnQE0tfQid8ym08TQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFOLkIiM/jTAMgYlymADhXrCWBWk6MB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvNHVRaUl6LU5NQXlCaVhLWUFPRmVzSllGYVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAFUASoD BARUASADBANUAfADBACR7FADBADD5AsDBADD5CswDQYJKoZIhvcNAQELBQADggEB ADwGLy/2ohSIkNR0J3rOKsWJaViDpF7CtjC4fTYxRI0cC0DG+BANWCbBFh5ATGfD pWTz9OiEoifADMFpwYQxm+S1JwRBi5fVbXJPl5sNGT54Ix+HL3yVPeFH77HoVkhh Ol++DG6GtuliXOclFgnZUK7MJQEy15LpUWxXSWeo1/GA/7arNvL+e9SKIU4zPKYj M2bODIX76/LQJFkERDzvsmiTII/MO/372V7ORyAeJ4k7Ac7bxVSLbzdp0U19Gvi1 c45OMcqOuK85U3hJZ+74C5i6I2I/occcWvEylusL8Jrpn64CSkZRB7w/MX1PdcYP F6XQ/OeOz9Uz1a4mBkQzDvQ= -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:58 2026 by rpki-client